Privacy Policy

Effective date: October 9, 2026
Product: Flash Fill, a SerpFlow product
Contact: bsrecruiting03@gmail.com

Information we process

Google sign-in. When you sign in, Google provides an account identifier, email address, and display name. Flash Fill requests only the openid, email, and profile scopes and uses this information to identify your account and separate your saved records from other users’ records.

Resume and profile. When you choose a PDF resume, the extension sends it over HTTPS to the Flash Fill API on Render to extract draft profile fields. The current parser processes the PDF in memory and does not write its bytes or raw extracted text to Turso. The extension keeps a browser-local copy of the PDF so it can attach it to supported job application forms. Once you review and save your profile, its fields sync to Turso; the PDF bytes do not.

Settings and saved work. Flash Fill stores and syncs your reviewed profile, autofill settings, saved applications, and saved responses under your signed-in account. Passwords, secrets, tokens, and resumeBase64 fields are excluded from the current server sync. Device-only credentials may remain in browser-local extension storage.

Technical records and support. The service stores hashed session tokens, sync cursors, and event metadata needed for sign-in and synchronization. If you email support, your message and address are handled in the support Gmail account.

How information is used and shared

Flash Fill uses this information to sign you in, create a profile draft from a resume you select, fill application forms at your direction, save your work, synchronize it across installations, and operate the service. Google provides sign-in, Render hosts the API, and Turso stores synchronized account records. When you use Flash Fill on a job portal, the information you choose to place into that portal’s form may be received by that portal when the form advances or submits. The portal controls its own handling of submitted applications.

Flash Fill’s use of information received from Google APIs adheres to the Chrome Web Store User Data Policy, including its Limited Use requirements.

Storage and deletion

Synced account records stay in Turso while your account is active. Deleting an individual profile, application, or saved response currently creates a sync deletion marker; its stored row may still contain the former record until an account-level purge. Browser-local PDF bytes and device-only settings are separate from Turso sync.

To request removal of your Flash Fill account data, email bsrecruiting03@gmail.com. After verifying account ownership, an operator can delete the account and its associated active Turso records, including sync markers and sessions. This is an operator-assisted process, not an in-app self-service button. Uninstalling the extension removes its browser-local storage in that Chrome profile, but does not delete synchronized Turso data or applications already sent to job portals. Provider backups, operational logs, and support correspondence are separate from the active database and may remain for their respective retention periods.

Your choices and security

You choose whether to import a resume, correct and save a profile, enable autofill, allow automatic page advancement or submission, and use a portal’s previous-application option. The extension communicates with the API over HTTPS. The backend stores hashes of opaque session tokens and scopes synchronized records to your signed-in account.

For questions, corrections, or data requests, contact bsrecruiting03@gmail.com. If this policy changes, the published version will show an updated effective date.